Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: /lMI3/Acx8qpf+gVVOiKbSnjHJ8Y0dfGYcrdaO7cuf8=
Subject key identifier: 6C:80:03:80:84:3C:6E:D0:1E:77:7C:03:D9:17:BA:7A:E3:ED:BF:7B
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 019676E7E8F09AF7022575E0F22A98DB8F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 1518
Signing time: Sun 27 Apr 2025 11:00:31 +0000
Manifest this update: Sun 27 Apr 2025 11:00:31 +0000
Manifest next update: Mon 28 Apr 2025 11:00:31 +0000
Files and hashes: 1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: 6qBOAiToY1Aq5SARTtuWFX/1g7JKC8eGsYOzx/kW6+Y=)
2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:e8:f0:9a:f7:02:25:75:e0:f2:2a:98:db:8f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Apr 27 11:00:31 2025 GMT
Not After : Apr 28 11:00:31 2025 GMT
Subject: CN=6c800380843c6ed01e777c03d917ba7ae3edbf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:de:3c:3e:c2:06:65:d7:c2:ef:9d:65:3a:
c3:b1:15:08:89:28:c7:a1:81:42:89:81:a8:38:5e:
19:31:28:72:0f:f3:79:b1:ba:a5:8f:9a:8e:b8:71:
59:8c:4f:be:f8:7f:39:dd:40:ab:da:18:94:a7:46:
4f:39:8e:2e:bb:89:be:11:33:0d:50:ac:d9:16:2b:
d7:70:18:21:da:61:f4:b5:49:e9:36:26:c6:ab:63:
3d:66:7d:1b:ef:9b:65:fe:89:0d:81:64:70:b4:75:
7f:bd:7a:65:ab:f4:0e:e0:01:a3:26:59:8c:0d:76:
0c:c4:64:e3:cb:72:56:61:65:01:da:70:2e:f4:23:
e0:c8:f0:e6:fa:4b:dc:80:a3:6f:ea:64:54:d1:15:
be:0a:22:91:99:4e:a0:25:a7:51:2a:af:a7:46:a5:
2f:c2:cd:23:33:63:1d:27:b4:05:7a:6c:23:93:96:
cb:6a:45:ed:ff:83:5a:7e:4f:ab:d4:2e:08:94:63:
bd:14:cb:fb:cc:44:6e:66:c9:ec:9d:1c:e3:f9:9f:
95:50:d9:06:98:df:7a:66:cc:43:4e:78:22:e0:33:
54:35:3f:51:8f:95:04:94:fe:4a:8f:fb:bb:46:40:
bc:cf:94:be:58:34:1d:26:a7:aa:9c:3d:f3:20:9c:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:03:80:84:3C:6E:D0:1E:77:7C:03:D9:17:BA:7A:E3:ED:BF:7B
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:07:fa:b8:b0:ae:f6:da:e7:f9:47:b1:89:01:35:fc:9e:08:
bc:c7:98:ec:14:46:5f:29:fd:26:51:60:a4:88:cc:22:b4:8c:
5b:3c:18:e6:6e:6b:12:29:b5:92:ad:74:66:2c:7d:3b:5c:84:
c4:f7:b4:5b:fe:02:83:d8:6e:42:5d:da:2c:7b:eb:6d:7d:2c:
4d:8a:e1:c4:7e:3f:2d:c4:85:98:ce:b2:c3:44:b7:38:59:ee:
ab:29:24:64:2a:91:78:89:6d:0a:14:28:a5:d3:bc:bd:bc:fc:
04:ca:66:6d:4c:bb:b5:23:ed:ff:7a:b9:15:75:87:c4:0d:41:
39:36:84:0a:8d:01:56:ac:33:23:1e:3b:39:26:a1:06:45:96:
64:25:dd:62:3e:8b:e6:e9:13:71:9a:98:b6:94:18:87:2b:60:
51:f9:5c:47:d8:6c:c9:87:25:53:92:bc:78:b2:5e:72:2e:68:
39:8b:b5:1d:15:96:20:d8:be:0e:96:89:77:3f:30:67:17:09:
aa:ec:4a:91:9d:3d:7f:a9:59:5e:a1:27:4f:a4:f2:75:e0:ff:
c5:c6:ea:46:78:67:aa:62:07:5e:41:b0:08:a1:ce:af:d5:c3:
bf:d6:0e:f5:c5:a2:08:29:78:56:a7:ef:d3:17:eb:92:57:fa:
f6:80:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:44:42 2025 by rpki-client